Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          lHR1poC/mD+jkGyvcC/7ojJfoo//noczN5SuiZZUlNo=
Subject key identifier:   14:46:3E:CF:E1:67:D5:6E:DB:0F:23:6F:B0:78:17:4A:C8:47:43:6D
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       0198D472A2BAFB4A08D99FB63D055BE272D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          04AD
Signing time:             Sat 23 Aug 2025 01:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:19 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: ZPsnp0LUl5q9/Qfc4BAuzxA9+Ao/AklKoIHJMZ46h1E=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:a2:ba:fb:4a:08:d9:9f:b6:3d:05:5b:e2:72:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Aug 23 01:02:19 2025 GMT
            Not After : Aug 24 01:02:19 2025 GMT
        Subject: CN=14463ecfe167d56edb0f236fb078174ac847436d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:29:48:31:f4:d8:cf:bc:c6:2c:1c:5b:dc:
                    93:c6:20:e0:87:ac:12:00:00:89:22:a1:6b:c2:50:
                    a2:a3:f0:dd:71:e5:eb:bc:50:4b:d0:6b:31:79:f7:
                    e4:73:e9:b5:04:e6:35:bf:b8:c0:26:b7:b5:43:72:
                    ea:42:26:05:7a:dc:e5:15:a3:07:d7:0b:f3:20:2e:
                    b5:33:94:61:57:80:1c:98:80:8a:69:e6:f4:91:3d:
                    67:ae:f1:85:4d:20:20:44:95:cb:ef:e5:f4:fe:9c:
                    60:87:19:96:46:8e:56:5a:8c:ff:57:98:ef:61:20:
                    f6:c9:5c:e0:49:46:bd:f5:93:34:0d:c2:78:32:da:
                    2d:92:ce:b0:35:ba:bf:66:24:bf:44:77:8f:d3:5e:
                    09:13:f9:e9:2a:2b:34:7d:05:f6:35:66:eb:24:fb:
                    78:43:e0:71:e3:66:69:c0:01:cb:13:1e:74:62:16:
                    86:16:d9:5c:61:41:8e:9e:46:b6:ad:7b:ca:dc:b2:
                    03:39:34:e3:39:ce:e9:ca:14:20:7d:ec:f9:3e:82:
                    4d:d4:25:e5:48:d3:29:5f:61:99:70:c4:d8:38:ae:
                    8b:63:ab:e1:8e:1b:7b:4f:1a:8e:fd:96:0d:60:1d:
                    e7:7c:6a:49:d6:9a:1c:9f:4f:d6:8f:1e:11:ee:f3:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:46:3E:CF:E1:67:D5:6E:DB:0F:23:6F:B0:78:17:4A:C8:47:43:6D
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:72:97:ad:ed:c3:dd:7e:59:49:7a:c4:13:82:e4:98:03:b2:
         92:58:8c:97:24:e5:ae:c2:da:52:3b:f9:cd:b7:af:87:22:b1:
         c3:37:4d:0f:a0:c5:dd:80:35:82:9d:59:96:4a:53:45:d0:48:
         25:0b:09:77:cb:c2:24:7b:98:91:6b:49:99:6d:aa:56:ac:10:
         93:b6:10:a2:2c:73:09:53:c9:e2:00:89:d9:01:e8:1e:b5:51:
         79:ca:8b:c1:6c:69:71:a3:72:5e:9b:9f:03:58:8b:62:f1:8c:
         bc:c8:d8:a2:11:58:0f:d4:21:bd:fb:bd:66:63:eb:90:60:b0:
         2e:eb:2d:84:1f:a1:2b:4d:bf:79:ce:f9:02:5e:36:ea:c9:20:
         8a:14:f7:66:83:80:66:10:72:b2:2a:92:7e:c6:f1:fb:8a:61:
         ba:24:a7:d6:33:e7:e9:f3:61:49:0d:c6:8d:a4:61:58:95:9a:
         de:de:6f:04:1d:fd:aa:65:d8:38:3d:5b:10:76:d5:30:b2:85:
         18:2d:8c:e4:e2:17:47:8f:60:37:c6:61:43:c5:3f:69:f1:f9:
         a3:d2:d9:92:6c:a6:fd:96:f9:de:7f:1e:09:a5:be:29:96:96:
         5c:0c:03:66:ba:d8:87:b0:e3:27:7b:ea:f0:8a:33:2a:2f:bc:
         4e:8a:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:34 2025 by rpki-client